c0abf198938f699da4c0ca2c3029c92a396e27f3cff7a94ae626f7b92c2a114b

Resubmissions

22/06/2026, 11:56

260622-n4drfsby7s8

22/06/2026, 11:45

260622-nwsweabv2j8

22/06/2026, 11:44

260622-nwc5ysby3v1

22/06/2026, 11:43

260622-nvmyrsbt9p1

Sharing

Copy URL Twitter E-mail

General

Target
processed-aba5dfd3-b7ce-47c0-9bf5-7b1bceeed7db_OfOAVby6 (1).jpeg
Size 843KB
Sample260622-nwsweabv2j
SHA256 c0abf198938f699da4c0ca2c3029c92a396e27f3cff7a94ae626f7b92c2a114b
MD5 1319466eb46643dc3468cf1ecf8b429c
SHA1 a4848990a188c3c4ac3eac6563a06968bbb9334f
SHA512 df1984c1552ddfb3502e9f3ab925c492b6181a5406badfb5327e79bb44cb0a37f0a708afeafc957ee8bdcce0018d5740a167f8ce46b02a5ae97c6916d1bb3193
SSDEEP 12288:TTIFHI44yEy7YhbwfsfB4YAvrB/Qp/lrCztRVJR0N/oJ5qC88ZLgbWSfMGYDZD7B:0vVEDB4ndE1ctRVr0Nyqh3bWNz7t
TLSH
T12005236EFCB15E5CFDB3E93A104A014AA4AA9DA1C8CBE41FC709325435047EE95EC7D2
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  processed-aba5dfd3-b7ce-47c0-9bf5-7b1bceeed7db_OfOAVby6 (1).jpeg
- Size 843KB
- SHA256 c0abf198938f699da4c0ca2c3029c92a396e27f3cff7a94ae626f7b92c2a114b
- MD5 1319466eb46643dc3468cf1ecf8b429c
- SHA1 a4848990a188c3c4ac3eac6563a06968bbb9334f
- SHA512 df1984c1552ddfb3502e9f3ab925c492b6181a5406badfb5327e79bb44cb0a37f0a708afeafc957ee8bdcce0018d5740a167f8ce46b02a5ae97c6916d1bb3193
- SSDEEP 12288:TTIFHI44yEy7YhbwfsfB4YAvrB/Qp/lrCztRVJR0N/oJ5qC88ZLgbWSfMGYDZD7B:0vVEDB4ndE1ctRVr0Nyqh3bWNz7t
- TLSH
  T12005236EFCB15E5CFDB3E93A104A014AA4AA9DA1C8CBE41FC709325435047EE95EC7D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware defense_evasion discovery persistence ransomware spyware trojan
- Downloads MZ/PE file
- Executes dropped EXE
- Loads dropped DLL
- Checks installed software on the system
  Looks up Uninstall key entries in the registry to enumerate software on the system.
  discovery
- Checks whether UAC is enabled
  defense_evasion trojan
- Suspicious use of NtSetInformationThreadHideFromDebugger
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Downloads MZ/PE file

Executes dropped EXE

Loads dropped DLL

Checks installed software on the system

Checks whether UAC is enabled

Suspicious use of NtSetInformationThreadHideFromDebugger

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2